last executing test programs: 288.121221ms ago: executing program 1 (id=2): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 265.221351ms ago: executing program 2 (id=3): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000014c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 235.914912ms ago: executing program 2 (id=7): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x564}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f00000f6000/0x4000)=nil, 0x4000}, 0x1}) 231.973983ms ago: executing program 0 (id=8): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 226.159083ms ago: executing program 1 (id=9): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="ee0d06000000060a"], 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 192.473993ms ago: executing program 0 (id=10): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 175.049924ms ago: executing program 3 (id=11): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) close(0x3) 156.143445ms ago: executing program 3 (id=12): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xcc840000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xfe\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\x8fY\xc3\xcf\x9e\x95s\x14\xd9\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\x8b\xc5\x06\xee\xf8\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000016c0)='\x00\x00\b\x00\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x00b\x00\x00\x00\x00\x00\x00\x00\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\aOv$\xc8\"\a\xd7T\xfb\xfc\xfa\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xbd\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcf\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\\5y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91O\x9c\xbf\x86\xec\x80TZO\x85\xdd\x9d\x18\x8e\x976\xd9c\xfb`L\x1b\xa7!9\xf3\x94\xd4\xeb\x06\x99M\x9b\xf6#\xf9\xd3\x90D\xf0\x92\xaf\x9ab\xa2\xc9\xe5\xe1\xb4\xb1\xd6\x19I\xcd\x0f\x17\x16\xbcES\x80\x9e\xf9\xb2\x0e\x13\xe6\xdc\xef\xf9\xd8J\x14\x94\x83\xb8\xd6\x995\x83\x11\x19\xb6cA\x1e\xba.\x91\xec\xb2b\x0e\xb5\xd7\xee\xa2\xaf\xcbZ\x05\xf7\x17\xc03\xa7\xb1\x9d\x80\xb6;p\xf6\xa6\x8b$s\xe6\x92\x84\x02emj\x99\x16D\xaeq8>\xee6t\x95\x02K|\xa1\xdc]\xaf\a\xc40(/\a<\x1b[x\xa5/\x86\xf4J!\xed\x1c\'\\I\x9c\xd6\xab\xc6\xbdr\x06Z\x9aFF\x8b\xcc\xf7\xb0Qe\xf2=\xb7\x1d\xce[\xb8[Ec\xf2\x93\xa7j\x1f\xb9&\xb3;s\xbc\x9e\xec\xb2\x91\xb3Y\xdby\xa7\xf5\x1d\xc1\x85\xb3\x83l&\x05t\xdb2\xd0\x99\xe3h\xf1\x8d#\x941e8\xb9\xca8\x021\xb9Yv!l\xcd\x01\x9d\a\br\xa1e\xe6\xd9DZfc\x0f\xb0\xbb\xb2\r\xf5E\x88\x0e\xd9\xbfo\xb0\x81c#!\xf1\aC\x8c\xa5\x10\x17\xf3q\v\xba\xfe\x81\x86\x01\x04\xb2\xcb\xbdU\xab\x1dn\xf1\b\xf6w!\xb6S\xdf\x96\x11\x02\x90\xd6\xd7BQN*\xae\xddP\x1b\\\xf0Nm') 146.368205ms ago: executing program 0 (id=13): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) close_range(r1, r1, 0x2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 138.714226ms ago: executing program 3 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x4) 102.286376ms ago: executing program 0 (id=15): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0xfffffffe) 73.869117ms ago: executing program 0 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000184}, 0x0) 50.636889ms ago: executing program 0 (id=17): syz_open_dev$evdev(0x0, 0x2, 0x80000) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x28de, 0x1205, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf7, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)={0x20, 0x8, 0x28, {0x28, 0x31, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x4800) 28.655479ms ago: executing program 3 (id=18): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000440)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 13.641689ms ago: executing program 3 (id=19): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xeffe, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 0s ago: executing program 3 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@flat, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/64, 0x40, 0x1, 0x32}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 23.061535][ T36] audit: type=1400 audit(1781143668.830:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.062805][ T286] cgroup: Unknown subsys name 'net' [ 23.084490][ T36] audit: type=1400 audit(1781143668.830:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.112012][ T36] audit: type=1400 audit(1781143668.860:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.112217][ T286] cgroup: Unknown subsys name 'devices' [ 23.235249][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.240928][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.333906][ T36] audit: type=1400 audit(1781143669.110:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.357407][ T36] audit: type=1400 audit(1781143669.110:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.366560][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.382406][ T36] audit: type=1400 audit(1781143669.110:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.414263][ T36] audit: type=1400 audit(1781143669.160:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.440382][ T36] audit: type=1400 audit(1781143669.160:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.470094][ T36] audit: type=1400 audit(1781143669.240:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.495696][ T36] audit: type=1400 audit(1781143669.240:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.496020][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.345460][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.352782][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.360016][ T296] bridge_slave_0: entered allmulticast mode [ 24.366276][ T296] bridge_slave_0: entered promiscuous mode [ 24.376134][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.383216][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.390540][ T296] bridge_slave_1: entered allmulticast mode [ 24.397001][ T296] bridge_slave_1: entered promiscuous mode [ 24.423053][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.430215][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.437554][ T294] bridge_slave_0: entered allmulticast mode [ 24.444042][ T294] bridge_slave_0: entered promiscuous mode [ 24.451822][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.459270][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.466396][ T294] bridge_slave_1: entered allmulticast mode [ 24.472613][ T294] bridge_slave_1: entered promiscuous mode [ 24.500899][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.508082][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.515249][ T293] bridge_slave_0: entered allmulticast mode [ 24.521476][ T293] bridge_slave_0: entered promiscuous mode [ 24.531365][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.538493][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.545780][ T293] bridge_slave_1: entered allmulticast mode [ 24.552186][ T293] bridge_slave_1: entered promiscuous mode [ 24.633503][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.640579][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.647909][ T295] bridge_slave_0: entered allmulticast mode [ 24.654388][ T295] bridge_slave_0: entered promiscuous mode [ 24.684049][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.691297][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.698407][ T295] bridge_slave_1: entered allmulticast mode [ 24.704656][ T295] bridge_slave_1: entered promiscuous mode [ 24.785622][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.792780][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.800278][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.807486][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.819166][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.826260][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.833681][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.840800][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.858518][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.865722][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.873116][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.880173][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.900412][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.907501][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.914811][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.921842][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.951413][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.959057][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.966992][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.974290][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.981443][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.989294][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.996936][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.004322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.016525][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.023608][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.037832][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.045007][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.065448][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.072595][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.080973][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.088051][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.102375][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.122749][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.129835][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.145856][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.152924][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.160586][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.167643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.222072][ T296] veth0_vlan: entered promiscuous mode [ 25.239025][ T293] veth0_vlan: entered promiscuous mode [ 25.252492][ T295] veth0_vlan: entered promiscuous mode [ 25.267836][ T294] veth0_vlan: entered promiscuous mode [ 25.276967][ T296] veth1_macvtap: entered promiscuous mode [ 25.287311][ T295] veth1_macvtap: entered promiscuous mode [ 25.294684][ T293] veth1_macvtap: entered promiscuous mode [ 25.337932][ T294] veth1_macvtap: entered promiscuous mode [ 25.343597][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.517592][ T334] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 25.570802][ T342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.715137][ T356] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 64) [ 25.715163][ T356] rust_binder: Error while translating object. [ 25.726133][ C0] BUG: TASK stack guard page was hit at ffffc9000c07ffb8 (stack is ffffc9000c080000..ffffc9000c088000) [ 25.726163][ C0] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 25.726182][ C0] CPU: 0 UID: 0 PID: 356 Comm: syz.3.20 Not tainted syzkaller #0 d17067fa43c370e744802cb602e9182a4a42e9ef [ 25.726206][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 25.726216][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 25.726247][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 25.726261][ C0] RSP: 0018:ffffc9000c07ffc0 EFLAGS: 00010282 [ 25.726279][ C0] RAX: ffffc9000c080108 RBX: ffffc9000c080108 RCX: ffffc9000c080118 [ 25.726293][ C0] RDX: ffffc9000c0800f8 RSI: ffffc9000c0800f8 RDI: ffffc9000c080160 [ 25.726306][ C0] RBP: ffffc9000c080080 R08: ffffc9000c080101 R09: 0000000000000000 [ 25.726319][ C0] R10: ffffc9000c080108 R11: fffff5200181002d R12: 0000000000000000 [ 25.726331][ C0] R13: dffffc0000000000 R14: ffffc9000c080110 R15: ffffc9000c0800f8 [ 25.726343][ C0] FS: 00007fd9f49196c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.726358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.726371][ C0] CR2: ffffc9000c07ffb8 CR3: 000000010f7ae000 CR4: 00000000003526b0 [ 25.726391][ C0] Call Trace: [ 25.726399][ C0] [ 25.726409][ C0] ? __unwind_start+0x216/0x410 [ 25.726435][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 25.726459][ C0] ? arch_stack_walk+0xf2/0x170 [ 25.726476][ C0] ? stack_trace_save+0xaa/0x100 [ 25.726497][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 25.726518][ C0] ? __asan_memset+0x39/0x50 [ 25.726537][ C0] ? save_stack+0x125/0x240 [ 25.726560][ C0] ? free_contig_range+0x260/0x260 [ 25.726579][ C0] ? __reset_page_owner+0x450/0x450 [ 25.726602][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 25.726620][ C0] ? sched_clock_noinstr+0xd/0x30 [ 25.726639][ C0] ? __set_page_owner+0x8e/0x600 [ 25.726662][ C0] ? __kasan_check_read+0x15/0x20 [ 25.726679][ C0] ? __zone_watermark_ok+0x134/0x630 [ 25.726704][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 25.726726][ C0] ? __cfi___zone_watermark_ok+0x10/0x10 [ 25.726750][ C0] ? kasan_unpoison+0x4a/0x70 [ 25.726767][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 25.726789][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 25.726813][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 25.726834][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 25.726861][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 25.726888][ C0] ? prep_new_page+0x2d/0x190 [ 25.726912][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 25.726943][ C0] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 25.726968][ C0] ? static_key_count+0x45/0x70 [ 25.726993][ C0] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 25.727022][ C0] ? lruvec_init+0x1b1/0x280 [ 25.727042][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 25.727065][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 25.727089][ C0] ? unwind_get_return_address+0x51/0x90 [ 25.727110][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 25.727131][ C0] ? arch_stack_walk+0x10a/0x170 [ 25.727151][ C0] ? stack_trace_save+0xaa/0x100 [ 25.727172][ C0] ? stack_depot_save_flags+0x672/0x800 [ 25.727198][ C0] ? kasan_save_track+0x4f/0x80 [ 25.727218][ C0] ? kasan_save_track+0x3e/0x80 [ 25.727238][ C0] ? kasan_save_free_info+0x4a/0x60 [ 25.727254][ C0] ? __kasan_slab_free+0x5f/0x80 [ 25.727274][ C0] ? kfree+0x158/0x440 [ 25.727291][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.727311][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 25.727364][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x1706/0x2660 [ 25.727392][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 25.727421][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 25.727455][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 25.727479][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 25.727505][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 25.727527][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 25.727559][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 25.727584][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 25.727605][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 25.727626][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 25.727646][ C0] ? do_syscall_64+0x57/0xf0 [ 25.727670][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.727701][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 25.727728][ C0] ? kasan_save_free_info+0x4a/0x60 [ 25.727744][ C0] ? __kasan_slab_free+0x5f/0x80 [ 25.727764][ C0] ? kfree+0x158/0x440 [ 25.727779][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.727800][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.727820][ C0] ? _RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x594/0x850 [ 25.727868][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 25.727893][ C0] ? __cfi__RNvXsd_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kboxINtB5_3BoxINtNtNtB9_4sync3arc8ArcInnerNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoENtNtB7_9allocator7KmallocENtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4dropB1l_+0x10/0x10 [ 25.727939][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x413/0x580 [ 25.727982][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreemINtNtNtB7_4list3arc7ListArcNtNtCs2tVsXcF29le_11rust_binder7process11NodeRefInfoKyd703a5263dcc8650_EE9raw_entryB1i_+0x10/0x10 [ 25.728033][ C0] ? __kasan_check_write+0x18/0x20 [ 25.728053][ C0] ? _raw_spin_lock+0x92/0x120 [ 25.728078][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.728104][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x1706/0x2660 [ 25.728132][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process10update_ref+0x10/0x10 [ 25.728163][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 25.728196][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.728213][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 25.728244][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 25.728277][ C0] ? __kasan_check_write+0x18/0x20 [ 25.728295][ C0] ? _raw_spin_lock+0x92/0x120 [ 25.728319][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.728343][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x6a9/0xc70 [ 25.728373][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.728391][ C0] ? _RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x5f4/0xc70 [ 25.728422][ C0] ? __cfi__RINvMs4_NtCs2tVsXcF29le_11rust_binder10allocationNtB6_14AllocationView4readNtNtB8_4defs16FlatBinderObjectEB8_+0x10/0x10 [ 25.728453][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 25.728482][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.728499][ C0] ? _RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x1ef/0x3d0 [ 25.728526][ C0] ? __cfi__RNvMs0_NtCs1ewLyjEZ7Le_6kernel4pageNtB5_4Page8read_raw+0x10/0x10 [ 25.728557][ C0] ? __kasan_check_write+0x18/0x20 [ 25.728575][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.728599][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x30c/0x5dd0 [ 25.728627][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.728646][ C0] ? _RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x1715/0x5dd0 [ 25.728677][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.728705][ C0] ? __cfi__RNvXs_NtCs2tVsXcF29le_11rust_binder10allocationNtB4_10AllocationNtNtNtCsb7ts3l0a5c3_4core3ops4drop4Drop4drop+0x10/0x10 [ 25.728734][ C0] ? stack_depot_save_flags+0x399/0x800 [ 25.728759][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x181/0x2d0 [ 25.728792][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.728811][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 25.728840][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 25.728871][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 25.728898][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 25.728919][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 25.728940][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 25.728959][ C0] ? do_syscall_64+0x57/0xf0 [ 25.728983][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.729018][ C0] ? _RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x1c8/0x2d0 [ 25.729052][ C0] ? __cfi__RNvXsc_NtCs1ewLyjEZ7Le_6kernel3strNtB5_12RawFormatterNtNtCsb7ts3l0a5c3_4core3fmt5Write9write_str+0x10/0x10 [ 25.729086][ C0] ? _RNvMs9_NtCsb7ts3l0a5c3_4core3fmtNtB5_9Formatter12pad_integral+0x307/0x810 [ 25.729117][ C0] ? __cfi__RNvMsk_NtNtNtCsb7ts3l0a5c3_4core3fmt3num3impj10__fmt_inner+0x10/0x10 [ 25.729142][ C0] ? put_dec_trunc8+0x229/0x380 [ 25.729166][ C0] ? put_dec+0xd7/0xf0 [ 25.729189][ C0] ? __asan_memset+0x39/0x50 [ 25.729208][ C0] ? move_right+0x8e/0xb0 [ 25.729232][ C0] ? format_decode+0x1bb/0x1610 [ 25.729257][ C0] ? vsnprintf+0x7b4/0x1ad0 [ 25.729281][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.729301][ C0] ? vsnprintf+0x19ef/0x1ad0 [ 25.729326][ C0] ? desc_read+0x202/0x3e0 [ 25.729349][ C0] ? __kasan_check_write+0x18/0x20 [ 25.729368][ C0] ? desc_read+0x1ab/0x3e0 [ 25.729391][ C0] ? prb_first_seq+0x109/0x1d0 [ 25.729412][ C0] ? __cfi_prb_first_seq+0x10/0x10 [ 25.729432][ C0] ? __kasan_check_write+0x18/0x20 [ 25.729450][ C0] ? desc_read+0x1ab/0x3e0 [ 25.729471][ C0] ? __kasan_check_read+0x15/0x20 [ 25.729488][ C0] ? this_cpu_in_panic+0x56/0x90 [ 25.729510][ C0] ? _prb_read_valid+0x9f3/0xa80 [ 25.729530][ C0] ? record_print_text+0x290/0x450 [ 25.729558][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 25.729585][ C0] ? update_curr+0xf8/0x9e0 [ 25.729604][ C0] ? xfd_validate_state+0x68/0x140 [ 25.729630][ C0] ? save_fpregs_to_fpstate+0x196/0x220 [ 25.729653][ C0] ? __kasan_check_write+0x18/0x20 [ 25.729671][ C0] ? __switch_to+0xc4f/0x1300 [ 25.729689][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 25.729716][ C0] ? __cfi___switch_to+0x10/0x10 [ 25.729744][ C0] ? psi_task_switch+0xad/0xa10 [ 25.729768][ C0] ? _raw_spin_unlock+0x45/0x60 [ 25.729793][ C0] ? finish_task_switch+0x139/0x760 [ 25.729817][ C0] ? __switch_to_asm+0x3d/0x70 [ 25.729835][ C0] ? __schedule+0x14d6/0x2100 [ 25.729863][ C0] ? __sched_text_start+0x10/0x10 [ 25.729890][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 25.729914][ C0] ? up+0x10a/0x1b0 [ 25.729932][ C0] ? __cfi_up+0x10/0x10 [ 25.729951][ C0] ? __kasan_check_read+0x15/0x20 [ 25.729970][ C0] ? _RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x9a/0x180 [ 25.729998][ C0] ? __cfi__RNvMs_NtNtCs1ewLyjEZ7Le_6kernel5alloc9allocatorNtB4_7Kmalloc14aligned_layout+0x10/0x10 [ 25.730033][ C0] ? preempt_schedule_common+0x2d/0x60 [ 25.730050][ C0] ? preempt_schedule+0xc5/0xe0 [ 25.730066][ C0] ? __cfi_preempt_schedule+0x10/0x10 [ 25.730084][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.730103][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5alloc20dangling_from_layout+0x11/0x20 [ 25.730129][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x396/0x820 [ 25.730168][ C0] ? __cfi__RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtB4_6option6OptionNtNtCs2tVsXcF29le_11rust_binder6thread18ScatterGatherStateEEB16_+0x10/0x10 [ 25.730205][ C0] ? vprintk_emit+0x3e3/0x650 [ 25.730231][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 25.730256][ C0] ? _RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x47c/0x760 [ 25.730284][ C0] ? __cfi__RINvMNtCs2tVsXcF29le_11rust_binder10allocationNtB3_10Allocation5writeyEB5_+0x10/0x10 [ 25.730312][ C0] ? vprintk_default+0x2a/0x40 [ 25.730335][ C0] ? vprintk+0x93/0xa0 [ 25.730351][ C0] ? _printk+0xde/0x140 [ 25.730372][ C0] ? __cfi___check_object_size+0x10/0x10 [ 25.730391][ C0] ? __cfi__printk+0x10/0x10 [ 25.730412][ C0] ? _copy_from_user+0x87/0xa0 [ 25.730438][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeNtNtCs2tVsXcF29le_11rust_binder10allocation10AllocationEBK_+0x1a/0xf0 [ 25.730468][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c47/0x9460 [ 25.730494][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x7c54/0x9460 [ 25.730530][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x10/0x10 [ 25.730575][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 25.730623][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 25.730668][ C0] ? __cfi__RNvYNCINvMNtNtCsb7ts3l0a5c3_4core3fmt2rtNtB8_8Argument11new_displayjE0INtNtNtBc_3ops8function6FnOnceTINtNtNtBc_3ptr8non_null7NonNulluEQNtBa_9FormatterEE9call_onceCs2tVsXcF29le_11rust_binder+0x10/0x10 [ 25.730755][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.730789][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.730815][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.730844][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.730873][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.730900][ C0] ? __kasan_check_write+0x18/0x20 [ 25.730919][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.730943][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.730969][ C0] ? stack_depot_save_flags+0x399/0x800 [ 25.730992][ C0] ? _RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x3f8/0x29c0 [ 25.731030][ C0] ? __cfi__RNvMs_NtCs2tVsXcF29le_11rust_binder11transactionNtB4_11Transaction3new+0x10/0x10 [ 25.731059][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 25.731076][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 25.731098][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 25.731119][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10e/0x720 [ 25.731164][ C0] ? __asan_memset+0x39/0x50 [ 25.731182][ C0] ? _RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x2c5/0x720 [ 25.731225][ C0] ? __cfi__RINvMNtNtCs1ewLyjEZ7Le_6kernel4list3arcINtB3_7ListArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtBS_11DeliverCodeEE8pin_initNtNtB7_5error5ErrorINtNtNtB7_4init10___internal11InitClosureNCNvMs0_BS_BP_11arc_try_news0_0BP_B1U_EEBS_+0x10/0x10 [ 25.731268][ C0] ? avc_has_perm_noaudit+0x2bd/0x360 [ 25.731290][ C0] ? avc_has_perm+0x1ec/0x240 [ 25.731309][ C0] ? avc_has_perm+0x211/0x240 [ 25.731329][ C0] ? _RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x85/0x1e0 [ 25.731351][ C0] ? __cfi__RNvNtCs1ewLyjEZ7Le_6kernel5error9to_result+0x10/0x10 [ 25.731375][ C0] ? __kasan_check_write+0x18/0x20 [ 25.731392][ C0] ? _raw_spin_lock+0x92/0x120 [ 25.731416][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.731442][ C0] ? selinux_binder_transaction+0x165/0x1d0 [ 25.731467][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x18f8/0x4380 [ 25.731500][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread11transaction+0x10/0x10 [ 25.731542][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.731566][ C0] ? __kasan_check_write+0x18/0x20 [ 25.731584][ C0] ? _RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x1271/0xa690 [ 25.731630][ C0] ? __cfi__RNvMs2_NtCs2tVsXcF29le_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 25.731679][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.731707][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.731732][ C0] ? __kasan_check_write+0x18/0x20 [ 25.731750][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.731774][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.731800][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 25.731826][ C0] ? stack_depot_save_flags+0x399/0x800 [ 25.731851][ C0] ? kasan_save_track+0x4f/0x80 [ 25.731871][ C0] ? kasan_save_track+0x3e/0x80 [ 25.731890][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 25.731907][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 25.731928][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.731947][ C0] ? __set_page_owner+0x2af/0x600 [ 25.731969][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 25.731992][ C0] ? prep_new_page+0x2d/0x190 [ 25.732023][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 25.732048][ C0] ? __alloc_pages_noprof+0x35f/0x7e0 [ 25.732073][ C0] ? alloc_slab_page+0x6b/0x1e0 [ 25.732093][ C0] ? allocate_slab+0x69/0x420 [ 25.732113][ C0] ? ___slab_alloc+0x5a2/0x8d0 [ 25.732133][ C0] ? __kmalloc_node_track_caller_noprof+0x2e6/0x4f0 [ 25.732154][ C0] ? krealloc_noprof+0x8d/0x130 [ 25.732175][ C0] ? _RNvMs3_NtCs2tVsXcF29le_11rust_binder6threadNtB5_11ThreadError7try_new+0x106/0x6e0 [ 25.732208][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x54c/0x1c70 [ 25.732239][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x3e3/0x5d80 [ 25.732265][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 25.732285][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 25.732305][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 25.732323][ C0] ? do_syscall_64+0x57/0xf0 [ 25.732349][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.732385][ C0] ? __kasan_check_write+0x18/0x20 [ 25.732404][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.732429][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.732453][ C0] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.732472][ C0] ? __set_page_owner+0x2af/0x600 [ 25.732495][ C0] ? __kasan_check_write+0x18/0x20 [ 25.732512][ C0] ? __set_page_owner+0x3fe/0x600 [ 25.732533][ C0] ? __cfi___set_page_owner+0x10/0x10 [ 25.732554][ C0] ? kasan_unpoison+0x4a/0x70 [ 25.732572][ C0] ? post_alloc_hook+0x37d/0x3b0 [ 25.732595][ C0] ? __cfi_post_alloc_hook+0x10/0x10 [ 25.732618][ C0] ? gfp_to_alloc_flags_cma+0x1c0/0x1c0 [ 25.732637][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 25.732661][ C0] ? __cfi__raw_spin_trylock+0x10/0x10 [ 25.732685][ C0] ? __kasan_check_write+0x18/0x20 [ 25.732703][ C0] ? prep_new_page+0x42/0x190 [ 25.732727][ C0] ? get_page_from_freelist+0x496e/0x4a20 [ 25.732757][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.732783][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.732808][ C0] ? __kasan_check_write+0x18/0x20 [ 25.732827][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.732851][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.732879][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.732906][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.732932][ C0] ? __kasan_check_write+0x18/0x20 [ 25.732950][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.732977][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.733002][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 25.733088][ C0] ? stack_depot_save_flags+0x399/0x800 [ 25.733110][ C0] ? kasan_save_track+0x4f/0x80 [ 25.733126][ C0] ? kasan_save_track+0x3e/0x80 [ 25.733147][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 25.733163][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 25.733183][ C0] ? __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 25.733194][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.733205][ C0] ? krealloc_noprof+0x8d/0x130 [ 25.733226][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x82f/0x1c70 [ 25.733260][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x3e3/0x5d80 [ 25.733284][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 25.733303][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 25.733322][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 25.733339][ C0] ? do_syscall_64+0x57/0xf0 [ 25.733360][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.733457][ C0] ? _RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x416/0x580 [ 25.733493][ C0] ? __wake_up+0x169/0x190 [ 25.733513][ C0] ? __cfi__RNvMs1_NtCs1ewLyjEZ7Le_6kernel6rbtreeINtB5_6RBTreelINtNtNtB7_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder6thread6ThreadEE9raw_entryB1e_+0x10/0x10 [ 25.733556][ C0] ? __kasan_check_write+0x18/0x20 [ 25.733585][ C0] ? _raw_spin_lock+0x92/0x120 [ 25.733607][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 25.733630][ C0] ? _raw_spin_unlock+0x45/0x60 [ 25.733663][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 25.733688][ C0] ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x1008/0x1c70 [ 25.733720][ C0] ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10 [ 25.733752][ C0] ? __kasan_check_write+0x18/0x20 [ 25.733769][ C0] ? _RINvNtCsb7ts3l0a5c3_4core3ptr13drop_in_placeINtNtNtCs1ewLyjEZ7Le_6kernel4sync3arc3ArcINtCs2tVsXcF29le_11rust_binder7DTRWrapNtNtB1o_4node4NodeEEEB1o_+0x155/0x4a0 [ 25.733812][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.733837][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.733860][ C0] ? __kernel_text_address+0x11/0x40 [ 25.733882][ C0] ? unwind_get_return_address+0x51/0x90 [ 25.733904][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 25.733934][ C0] ? arch_stack_walk+0x10a/0x170 [ 25.733953][ C0] ? stack_trace_save+0xaa/0x100 [ 25.733973][ C0] ? stack_depot_save_flags+0x38/0x800 [ 25.733997][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x11db/0x5d80 [ 25.734029][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.734047][ C0] ? _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x1231/0x5d80 [ 25.734073][ C0] ? _raw_spin_trylock+0xb5/0x140 [ 25.734098][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 25.734126][ C0] ? is_bpf_text_address+0x17b/0x1a0 [ 25.734152][ C0] ? kernel_text_address+0xa9/0xe0 [ 25.734175][ C0] ? __kasan_check_write+0x18/0x20 [ 25.734192][ C0] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 25.734215][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 25.734240][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 25.734264][ C0] ? stack_depot_save_flags+0x399/0x800 [ 25.734288][ C0] ? kasan_save_track+0x4f/0x80 [ 25.734306][ C0] ? kasan_save_track+0x3e/0x80 [ 25.734324][ C0] ? kasan_save_free_info+0x4a/0x60 [ 25.734340][ C0] ? __kasan_slab_free+0x5f/0x80 [ 25.734359][ C0] ? kfree+0x158/0x440 [ 25.734375][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.734404][ C0] ? kvrealloc_noprof+0x59/0x120 [ 25.734422][ C0] ? _RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder7process7ProcessENtNtB7_9allocator8KVmallocE7reserveB1g_+0x35f/0x700 [ 25.734463][ C0] ? _RNvCs2tVsXcF29le_11rust_binder16rust_binder_open+0xcdd/0x19f0 [ 25.734488][ C0] ? do_dentry_open+0x97b/0x1510 [ 25.734511][ C0] ? vfs_open+0x86/0x240 [ 25.734537][ C0] ? path_openat+0x2bb1/0x34f0 [ 25.734560][ C0] ? do_filp_open+0x1f5/0x440 [ 25.734581][ C0] ? do_sys_openat2+0x134/0x1d0 [ 25.734603][ C0] ? __x64_sys_openat+0x13a/0x170 [ 25.734625][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 25.734643][ C0] ? do_syscall_64+0x57/0xf0 [ 25.734665][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.734696][ C0] ? __kasan_slab_free+0x6a/0x80 [ 25.734716][ C0] ? kfree+0x158/0x440 [ 25.734732][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.734751][ C0] ? cgroup_rstat_updated+0x141/0x810 [ 25.734777][ C0] ? krealloc_noprof+0xfa/0x130 [ 25.734800][ C0] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 25.734819][ C0] ? kvrealloc_noprof+0x66/0x120 [ 25.734836][ C0] ? _RNvMs0_NtNtCs1ewLyjEZ7Le_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCs2tVsXcF29le_11rust_binder7process7ProcessENtNtB7_9allocator8KVmallocE30push_within_capacity_uncheckedB1g_+0x29c/0x570 [ 25.734878][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 25.734897][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 25.734919][ C0] ? update_curr+0x6c1/0x9e0 [ 25.734937][ C0] ? detach_entity_load_avg+0x7b0/0x7b0 [ 25.734957][ C0] ? __calc_delta+0x280/0x280 [ 25.734973][ C0] ? mutex_unlock+0x90/0x240 [ 25.734991][ C0] ? update_entity_lag+0x28f/0x2c0 [ 25.735009][ C0] ? dequeue_entity+0x809/0x1380 [ 25.735030][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 25.735055][ C0] ? tg_unthrottle_up+0x9a0/0x9a0 [ 25.735076][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder16rust_binder_open+0x10/0x10 [ 25.735101][ C0] ? __cfi_avc_has_perm+0x10/0x10 [ 25.735120][ C0] ? __cfi_update_misfit_status+0x10/0x10 [ 25.735142][ C0] ? dequeue_entities+0x1d7/0x1400 [ 25.735167][ C0] ? sched_balance_newidle+0x31a/0xab0 [ 25.735190][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 25.735209][ C0] ? sched_clock_noinstr+0xd/0x30 [ 25.735227][ C0] ? __kasan_check_write+0x18/0x20 [ 25.735244][ C0] ? __switch_to+0xc4f/0x1300 [ 25.735260][ C0] ? __cfi___switch_to+0x10/0x10 [ 25.735284][ C0] ? psi_task_switch+0x4f2/0xa10 [ 25.735306][ C0] ? __kasan_check_write+0x18/0x20 [ 25.735323][ C0] ? finish_task_switch+0x1d9/0x760 [ 25.735345][ C0] ? __switch_to_asm+0x3d/0x70 [ 25.735362][ C0] ? __schedule+0x14d6/0x2100 [ 25.735394][ C0] ? avc_has_extended_perms+0x80b/0xe70 [ 25.735413][ C0] ? __asan_memcpy+0x5a/0x80 [ 25.735430][ C0] ? avc_has_extended_perms+0x969/0xe70 [ 25.735450][ C0] ? __asan_set_shadow_00+0x12/0x20 [ 25.735474][ C0] ? do_vfs_ioctl+0x182d/0x2010 [ 25.735494][ C0] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 25.735516][ C0] ? schedule+0xc5/0x240 [ 25.735539][ C0] ? futex_unqueue+0x136/0x160 [ 25.735564][ C0] ? ioctl_has_perm+0x39a/0x500 [ 25.735581][ C0] ? has_cap_mac_admin+0xd0/0xd0 [ 25.735598][ C0] ? futex_wait+0x2ac/0x7b0 [ 25.735614][ C0] ? __cfi_futex_wait+0x10/0x10 [ 25.735631][ C0] ? selinux_file_ioctl+0x732/0x1480 [ 25.735648][ C0] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 25.735674][ C0] ? do_futex+0x32a/0x510 [ 25.735696][ C0] ? __cfi_do_futex+0x10/0x10 [ 25.735720][ C0] ? __fget_files+0x2c5/0x340 [ 25.735740][ C0] ? bpf_lsm_file_ioctl+0xd/0x20 [ 25.735769][ C0] ? security_file_ioctl+0x3e/0x110 [ 25.735793][ C0] ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 25.735817][ C0] ? __se_sys_ioctl+0x135/0x1b0 [ 25.735837][ C0] ? __x64_sys_ioctl+0x7f/0xa0 [ 25.735856][ C0] ? x64_sys_call+0x1878/0x2ee0 [ 25.735873][ C0] ? do_syscall_64+0x57/0xf0 [ 25.735901][ C0] ? clear_bhb_loop+0x50/0xa0 [ 25.735918][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.735944][ C0] [ 25.735950][ C0] Modules linked in: [ 25.735965][ C0] ---[ end trace 0000000000000000 ]--- [ 25.735975][ C0] RIP: 0010:update_stack_state+0xf4/0x4b0 [ 25.736000][ C0] Code: 84 c0 0f 85 89 03 00 00 41 c6 06 01 b8 a8 00 00 00 49 89 d7 eb 05 b8 10 00 00 00 4c 8d 73 08 48 8d 4b 10 4c 89 7d b0 4c 01 f8 <48> 89 85 78 ff ff ff 48 8d 53 18 48 8d 43 28 48 8d 73 20 48 89 b5 [ 25.736014][ C0] RSP: 0018:ffffc9000c07ffc0 EFLAGS: 00010282 [ 25.736029][ C0] RAX: ffffc9000c080108 RBX: ffffc9000c080108 RCX: ffffc9000c080118 [ 25.736043][ C0] RDX: ffffc9000c0800f8 RSI: ffffc9000c0800f8 RDI: ffffc9000c080160 [ 25.736056][ C0] RBP: ffffc9000c080080 R08: ffffc9000c080101 R09: 0000000000000000 [ 25.736068][ C0] R10: ffffc9000c080108 R11: fffff5200181002d R12: 0000000000000000 [ 25.736080][ C0] R13: dffffc0000000000 R14: ffffc9000c080110 R15: ffffc9000c0800f8 [ 25.736102][ C0] FS: 00007fd9f49196c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.736118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.736131][ C0] CR2: ffffc9000c07ffb8 CR3: 000000010f7ae000 CR4: 00000000003526b0 [ 25.736150][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 25.739523][ C0] Kernel Offset: disabled